Only support signed webhooks (require signing_secret configuration)

integrallis / stripe_event

Stripe webhook integration for Rails applications.

https://rubygems.org/gems/stripe_event

MIT License

840 stars 107 forks source link

Only support signed webhooks (require signing_secret configuration) #97

Closed rmm5t closed 6 years ago

rmm5t commented 6 years ago

What does it do?

Removes authentication_secret and associated basic auth support
Requires signing_secret usage
Adds event_filter (replaces use-cases for event_retriever)
Updates README with signing_secret and event_filter example usage

What else do you need to know?

This is a backwards incompatible set of changes, but it simplifies the overall codebase while also employing Stripe's best practices. The plan is to make this part of a v2.0.0 release.

Related Issues

Closes #95

coveralls commented 6 years ago

Coverage increased (+1.4%) to 100.0% when pulling f6334f5dfbbd087d09b0b0871fbfc0b83af6d836 on rmm5t:95-require-signing_secret into 7ba4aac84bce3cac8254d7a80aabfa4cedd361f5 on integrallis:master.